CVE-2026-45443
MEDIUM EPSS 9.3%
Published May 20, 20261mo ago · Modified Jun 17, 20261w ago
5.0 CVSS 3.1
Published May 20, 2026 1mo ago
Last Modified Jun 17, 2026 1w ago
Description
Missing Authorization vulnerability in ADD-ONS.ORG PDF for Elementor Forms + Drag And Drop Template Builder allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects PDF for Elementor Forms + Drag And Drop Template Builder: from n/a through 5.5.1.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N Attack Vector Network
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Changed
Confidentiality None
Integrity Low
Availability None
Threat Intelligence
EPSS Exploit Probability
9.3% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-862 Missing Authorization Authorization
References 1
- patchstack.com https://patchstack.com/database/wordpress/plugin/pdf-for-elementor-forms/vulnerability/wordpress-pdf-for-elementor-forms-drag-and-drop-template-builder-plugin-5-5-1-broken-access-control-vulnerability?_s_id=cve
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.